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and the Examiner said he could not find a copy scanned in the file. Here is another 
copy of the Supplemental IDS and articles. 
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IN THE UNITED STATES PATENT AND TRADEMARK OFFICE 



In re application of: 

Gerald R. Malan, et al. 

Serial No.: 09/855,809 

Filed: May I5 t 2001 

For: METHOD AND SYSTEM FOR PROFILING NETWORK 

FLOWS AT A MEASUREMENT POINT WITHIN A 
COMPUTER NETWORK 

Attorney Docket No.: UOM 0207PUSP 



Group Art Unit: 2151 Rf = CEl]/ 

Examiner: CENTRAL FAX CENTER 

0 8 2004 



SUPPLEMENTAL INFORMATION DISCLOSURE STATEMENT 



Commissioner for Patents 

United States Patent and Trademark Office 

Washington, D.C. 20231 

Sir: 

In compliance with the duty of disclosure under 37 C.RR. § 1.56 and § 1.97- 
1 . 98 , the references listed and identified on the attached Form PTO/SB08B are being submitted 
herewith for consideration by the Examiner. 

The undersigned certifies that each item of information contained in this 
Information Disclosure Statement was cited in a communication from a foreign patent office 



CERTIFICATE OF MAILING UNDER 37 C-F.R. § 1.8 



I httuby eertifj thai this paper, including nil enclosures referred to herein, b being deposited with (he United States Postal 
Service as first-class mail, postage prepaid, in an envelope addressed to: Commissi oner/pr Pafe^its* Jftyted^jfeajes Patent 
and Trademark Office, Washington, D.C. 20231 qui 



[Marwh ft. 2QQ2 

Dale of Deposit 



David R. Svmwitc 
Name of Person Signing 




Signature 
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S/N: 09/855.809 



Atty Dkt No. UOM 0207PUSP 



in a counterpart application (copy enclosed) not more than three months prior to the filing of 
this Statement, i.e., ffh^iarv 25. 2002. 

While this Statement is being filed in compliance with the duty of disclosure, 
citation of the attached references is not to be construed as an admission that any of the 
reference(s) are "material" as defined under 37 C-F.R. § 1.56(b). 



A copy of each reference listed on the attached Form PTO/SB08B is included 



herewith. Consideration and entry into the record of these references is respectfully requested. 



Date: March 5. 2002 

BROOKS Sc KUSHMAN P.C. 
1000 Town Center, 22nd Floor 
Southfield, MI 48075 
Phone: 248-358-1400 
Fax: 248-358-3351 



Respectfully submitted, 
Gerald R. Malan, et al. 




David R. Syrowik 

Reg. No. 27,956 

Attorney/ Agent for Applicant 



-2- 
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PTO/S8/08B < 1 0-96) (reproduced] 
Approver tor uso through 1 0/31/9 9 OMB 0651 -0031 
Patent and Trademark Office: US- DEPAflTMSNT OF COMMERCE 



Substitute tor Form 144967PTO 

INFORMATION DISCLOSURE 
STATEMENT BY APPUCANT 

(use as many sheets as necessary) 


Complete it Known 


Application Number 


09/855,809 


Piling Date 


May 15, 2001 


First Named inventor 


Gerald R. Ma lan, et al- 


Group Art Unit 


21S1 


Examiner Name 




Sheet | l | of i 


Attorney Docket Number 


UOM 0307 PUSP 


OTHER PRIOR ART - NON PATENT LITERATURE DOCUMENTS 




Examiner 
Initials ' 


Cite no/ 


Induce name of the author (in CAPITAL LETTERS), title or the article (when appropriate), tine or the 
item (book, magazine, journal* serial, symposium, catalog, etc.). date, pag^s), volume-Issue number(s). 
pubtisher. city and/or country where published. 


T" 






BROWNLEE, C, fiT AL., RFC2063 , Internet RFC, January 31* 
1997, pages 1-26* xp-002189311 , 
HTTP: //WWW. FAQS, ORG/BgCS/RFG2063 ifiE^ 








MANSFIELD, GLENN, BT AL. r Detection Defense, and Tracking 
of Internet -wide Illegal Access in a Distributed Manner, 
INET 2000, July 18-21, 2000, pages 1-12, XP-0021B93 12 , 
hrtrn: //www.iaoc.ora/inet2000/cdoroceedinas/lf /l^^Jita 








MANSFIELD, GLENN, BT AX/. , Towards Trapping Wily Intruders 
In The Large, Septemlser 7-9. 1999, pages 1-13, XP- 
002189313, 

http: //www- ipa .go. jp/ security/ fyll /report /contents/ iritrusio 
n/ ids/ raidl999glenn.pdf 








DAVID 4 JON, ET AL. , Results Of The Distributed- Systems 
intruder Workshop, December 7, 1999, pages 1-20, XP- 
002139314, Pennsylvania, 

httt3://oaqket3tortn. widexs . nl / d A s.txifeii£S^ 





























































Examiner 




Oate> 


1 


Signature 




Considered 





* EXAMINER: initial H reference considered, whether or not citation Is in conformance with MPEP 609. Draw line through dtatton if not In conformance and 
not considered. Indude copy ot this form with next communication to applicant 



'Unique citation designation number. 'AppPcant i$ to place a check mark here ri English language Translation i$ attached. 
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- ■ . .*TENT cooperation tre 



From the INTERNATIONAL SEARCHING AUTHORITY 



TO: 

Brooks & Kushman 

1000 Town Center 
22nd Floor 

Southfield, Michigan 48075 
UNITED STATES OF AMERICA 


NOTIFICATION OF TRANSMITTAL OF 
THE INTERNATIONAL SEARCH REPORT 
OR THE DECLARATION 

(PCT Rule 44.1) 


Data of mailing 

(day/monWeer) 25/02/2002 


Applicant's or agenf s file reference 
UOM0207PCT 


FOR FURTHER ACTION See paragraphs 1 and 4 below 


International application No. 
PCT/US 01/15702 


International filing data 
(Cay/monm/yeat) 16/Q5/2001 


Applicant *-fv 
THE REGENTS OF THE UNIVERSITY OF MICHIGAN 



*- [Z] The applicant ia hereby notified that the International Search Report has bosn established and is transmitted herewith. 
Filing of amendments and statement under Article 19: 

The applicant is entitled, IT he so wishes, to amend the claims of the international Application (see Rule 46): 

When? The time limit for filing such amendments is normally 2 months from the date of transmittal of the 
International Search Report; however, for more details, see the notes on the accompanying sheet 

Where? Directly to the international Bureau of WIPO 
34, cnemin des Colombettes 
121 1 Geneva 20. Switzerland 
Fasclmile No.: (41-22) 740.14.35 

For more detailed instructions, see the notes on the accompanying sheet. 

2. I I The applicant is hereby notified that no International Search Report will be established and that the declaration under 
1 — ' Article 17(2)<a) to thai effect is transmitted herewith. 

3. Q With regard to the protest again si payment 01 (an) additional feefs) under Rule 40.2, the applicant is notified that: 

|~~| the protest together with the decision thereon has been transmitted to the international Bureau together with the 
1 — ' applicant's request to forward the texts of both the protest and the decision thereon to the designated Offices. 

I 1 no decision has bean made yel on the protest; the applicant will be notified as soon as a decision is made. 

4. Further actions); The applicant is reminded of the following: 

Shortty after 16 months from the priority date, the International application will be published by the International Bureau. 
If the applicant wishes to avoid or postpone publication, a notice of withdrawal Of the international application, or of the 
priority claim, must reach the International Bureau as provided In Rulee 90P&1 and 90ofe.3, respectively, before the 
completion Of the technical preparations for International publication. 

Within 19 months from the priority date, a demand for International preliminary examination must be Wed If the applicant 
wishes to postpone the entry into the national phase until 30 months from the priority date (In soma Offices even later). 

Within 20 months trom the priority date, the applicant must perform the prescribed acts for entry into the national phase 
before all designated Offices which have not been elected in the demand or in a iater election within 19 months from the 
priority date or could not be elected because they are not bound by Chapter li. 



Name ana mailing address oi the international Searching Authority 
European Patent Office, PJB. 5818 Patentiaan 2 
NL-2280 HV Rjrjswi* 

Tel. (+31-70) 340-2040. Tx. 31 651 epO nl. 
Fax: (+31-70)340-3016 



Authorized officer 
Claude Berthon 



Form PCT/iSA/220 (July 1996) 
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Qj >TENT COOPERATION TREATY 1 

PCT 



INTERNATIONAL SEARCH REPORT 

(PCT Article 18 and Rules 43 and 44) 



Ap pecan? s or agent's file reference 

UOM0207PCT 


FOR FURTHER ^ ratification or Transmittal of international Search Report 

<Form PCT/lSA/220) as well as, where applicable, item 5 below. 

Av ■ IUN 


International application No. 

PCT/US 01/15702 


international filing date (day/month/year) 

16/05/2001 


(Earliest) Priority Date (day/manth/ye&r) 

08/09/2000 


Applicant 

THE REGENTS OF THE UNIVERSITY OF MICHIGAN 



This international Search Report has been prepared by this International Searching Authority and is transmitted to the applicant 
according to Article 16- A copy is being transmitted to the International Bureau. 

This International Search Report consists of a total of 2 sheers. 

[XI It is also accompanied by a copy of each prior art document cited in this report. 



1. Basis ol the report 

a. With regard to the language, the International search was carried out on the basis or the International application in the 
language in which ft was filed, unless otherwise indicated under this item. 



□ 



the international search was carried out on the basis of a translation of the international application furnished to this 
Authority (Rule 23.1(b)). 



With regard to any nucleotide and/or amino add sequence disclosed in the International application, the international search 

was carried out on the basis of the sequence listing : 

| ] contained in the hi ter national application in written form. 

filed together with the international application in computer readable form. 



□ 
□ 
□ 
□ 

□ 



furnished subsequently to this Authority In written form, 
furnished subsequently to this Authority in computer readble form. 

the statement that the subsequently furnished written sequence listing does not go beyond the disclosure in the 
Internationa] application as filed has been furnished. 

the statement that the information recorded in computer readable form Is identical to the written sequence listing has been 
furnished 



2. 

3. 



| | Certain claims were found unsoarchable (See Box I). 
I""! Unity of Invention is lacking (see Box II). 



A. With regard to the title. 

fX) the text is approved as submitted by the applicant. 

[""I the text has been established by this Authority to read as follows: 



5. With regard to the abstract, 

fX"l the text is approved as submitted by the applicant. 

I I the text has been established, according to Rule 38.2(b), by mis Authority as it appears in Boy Hi. The applicant may. 
1 — 1 within one month from the date of mailing of this international search report, submit comments to this Authority. 

6. The figure ol the drawings to be published with the abstract is Figure No. ty 

I 1 as suggested by the applicant. Q None of the figures. 

[X] because the applicant failed to suggest a figure. 

I | because this figure better characterizes the Invention. 



Form PCT/ISA/210 (first Sheei) (July 1998) 
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IN^EJRNATIONAL SEARCH REPORT 



Ttional Application No 

i/US O1/1S702 



A. CLASSIFICATION OP SUBJECT MATTER 

IPC 7 H04L29/06 H04L12/28 



According to Iftl&fnallOfial Pal&nl Classntcallon f IPC) or lo both national classification and IPC 



6. FIELDS SEARCHED 



Minimum documcntallon searched (ctassincalion system loflowed by classification symbols) 

IPC 7 H04L 



Documenrmion searched omer man mrmrnurn oocumenia.ik>n to me exieni thai such oocunnenis arc included in ma fields searched 



Electronic data base oonaulted during the international search {namo ot dala base and. where practical, search terms usod) 

EPO-Internal , WPI Data, INSPEC 



C. DOCUMENTS CONSIDERED TO BE RELEVANT 



Category * Citation of document, with indication where appropriate, ot the relevant passages 



Reie-vanl lo claim No 



RUTH: 



'RFC 



N. BROWNLEE, C. MILLS, G , 
2063" 

INTERNET RFC, 

31 January 1997 (1997-01-31), pages 1-26, 
XP0021S9311 

http ; //www. f aqs . org/rf cs/rf C2063 . html 

page 1, paragraph 1 

page 7 -page 8 

page 9, paragraph 9 

page 13 

page 18 

page 22, paragraph 10 
page 23, paragraph 4 
page 33, paragraph 4 

-/- 



1-24 



HI 



Further documents are listed in the continuation or box C. 



□ 



Patent family members are listed in amt*». 



' Special categories of cited documents : 

•A' document defining I he general fUaie Of the an Which Is not 

considered to be of particular relevance 
'£• earlier documenl but published on or after the international 
fMitg date 

*L* document which may throw doubts on priority claim's) or 
wnicn » cited to estab&sh the publics lion date of another 
citation or other special reason {as specified) 
'O* document referring to an oral disclosure, use, exhibiiionor 
other means 

P' document published prior lo the international filing dais but 
later than Ihe priori ly data claimed 



T' later document published after the international riling date 
or prfortty da to and not in conflict with Ihe applicaiion bui 
CttOd to understand the principle Or theory undariyiig the 

invention 

'X a document 01 particular roievanoo: n»e claimed invention 
cannot be considered novel or cannot be considered to 
involve an inventive step when the document is taken alone 

'Y* document of particular relevance; Ihe claimed Invention 
cannot be considered lo trtyorvc ah Inventive step when the 
document is combined with one or more othor such docu- 
ments, such combination being obvious to a person skilled 
in the an. 

document member of the same patera family 



Date of the actual completion of ihe international search 



7 February 2002 



Data of mailing of me international search report 



25/02/2002 



Name and mailing address of the ISA 

European Patent Office, P.B. 5816 Patent laan 2 
NL - 7260 HV Rtjswtjk 
Tel (+31-70) 340-2040. Tit. 31 65l epo nl. 
Fax: (+31-70) 34O-3076 



Authorized off rear 



Olmos, J 



Form PCl/ISA/2lO(ciB£ond«hoet)(JuV lVW) 



paoe 1 of 2 
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IN^RI>» VTlONAL SEARCH REPORT 



jtm 



uonai Application no 



PU/US 01/15702 



C.(Continualion) DOCUMENTS CONSIDERED TO BE RELEVANT 



Gaioyory ° Citation of tiocuinenl, wttn irxlicaiion.where appropriate, oi the relevant passages 



Rotcvant to claim no 



GLENN MANSFIELD, KOHEI OHTA: "Detection, 
Defense, and Tracking of Internet-Wide 
Illegal Access in a Distributed Manner" 
INET 2000, 

18 - 21 July 2000, pages 1-12, 
XP002189312 

http://www.1soc.Org/1 net2000/cdproceedings 

/lf/lf_2,htm 

the whole document 

GLENN MANSFIELD, KOHEI OHTA: "Towards 
trapping wily intruders 1n the large" 
1999 RAID, 

7-9 September 1999, pages 1-13, 
XP002189313 

http : //www . i pa . go . jp/secur T ty/fyl 1/report/ 
contents/1 ntrus 1 on/1 ds/r a 1 d 1999gl enn . pdf 
the whole document 

JON DAVID, CORY COHEN, BRADLEY FRANK, 
BRIAN DUNPHY, SAMMY MIGUES, PAT BECKER: 
"Results of the D1 stMbuted-Systems 
Intruder Workshop" 
CERT, 

7 December 1999 (1999-12-07), pages 1-20, 
XP002189314 

http ; //packet storm. w1 dexs ,nl/d1stributed/d 

s1t_workshop.pdf 

page 10-19 



1,2,4-7, 

10-12, 

14-20,24 



3,8,9, 
21-24 



1-24 



10-12. 
14-20 



5 



Fftim PCT/ISA/210 (cotiiriuaiton cH samd sheet) (July 19*13) 



oaae ? af ? 
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